Lucene search
WolfiWOLFI:CVE-2024-39338HistorySep 19, 2024 - 9:11 a.m.
CVE-2024-39338 vulnerabilities
2024-09-1909:11:50
packages.wolfi.dev
21
cve-2024-39338
vulnerabilities
kubeflow-centraldashboard
kubeflow-pipelines
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
36.5%
Vulnerabilities for packages: kubeflow-pipelines, lerna, kubeflow-centraldashboard, jitsucom-jitsu
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | jitsucom-jitsu | <= 2.8.0-r1 | jitsucom-jitsu-2.8.0-r1.apk |
| Wolfi | unknown | aarch64 | jitsucom-jitsu | <= 2.8.0-r1 | jitsucom-jitsu-2.8.0-r1.apk |
| Wolfi | unknown | x86_64 | kubeflow-centraldashboard | <= 1.9.0-r1 | kubeflow-centraldashboard-1.9.0-r1.apk |
| Wolfi | unknown | aarch64 | kubeflow-centraldashboard | <= 1.9.0-r1 | kubeflow-centraldashboard-1.9.0-r1.apk |
| Wolfi | unknown | x86_64 | kubeflow-pipelines | <= 2.2.0-r10 | kubeflow-pipelines-2.2.0-r10.apk |
| Wolfi | unknown | aarch64 | kubeflow-pipelines | <= 2.2.0-r10 | kubeflow-pipelines-2.2.0-r10.apk |
| Wolfi | unknown | x86_64 | lerna | <= 8.1.8-r1 | lerna-8.1.8-r1.apk |
| Wolfi | unknown | aarch64 | lerna | <= 8.1.8-r1 | lerna-8.1.8-r1.apk |
Related
vulnrichment
vulnrichment
CVE-2024-39338
2024-08-09 00:00:00
osv
osv
velociraptor-0.7.0.4.git97.675e45f9-12.1 on GA media
2024-08-20 00:00:00
CGA-cvr7-x2g5-2f3j
2024-08-23 10:04:57
CGA-8mxr-gwwc-5gvh
2024-09-12 12:08:43
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-296a0db958)
2024-09-12 00:00:00
Fedora: Security Advisory (FEDORA-2024-bdac6de5ee)
2024-09-12 00:00:00
cvelist
cvelist
CVE-2024-39338
2024-08-09 00:00:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-08-13 08:26:48
ubuntucve
ubuntucve
CVE-2024-39338
2024-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: nextcloud-29.0.6-2.fc39
2024-09-12 01:35:01
[SECURITY] Fedora 40 Update: nextcloud-29.0.6-2.fc40
2024-09-12 01:28:44
[SECURITY] Fedora 41 Update: nextcloud-29.0.6-1.fc41
2024-09-13 21:01:11
nessus
nessus
Fedora 40 : nextcloud (2024-296a0db958)
2024-09-12 00:00:00
Fedora 39 : nextcloud (2024-bdac6de5ee)
2024-09-12 00:00:00
ibm
ibm
nvd
nvd
CVE-2024-39338
2024-08-12 13:38:24
redhatcve
redhatcve
CVE-2024-39338
2024-08-16 00:58:49
debiancve
debiancve
CVE-2024-39338
2024-08-12 13:38:24
github
github
Server-Side Request Forgery in axios
2024-08-12 15:30:49
cve
cve
CVE-2024-39338
2024-08-12 13:38:24
redhat
redhat
(RHSA-2024:6209) Moderate: Red Hat OpenShift Service Mesh Containers for 2.4.10 security update
2024-09-03 08:23:51
(RHSA-2024:6210) Low: Red Hat OpenShift Service Mesh Containers for 2.5.4 security update
2024-09-03 08:23:58
(RHSA-2024:6667) Important: Red Hat OpenShift Dev Spaces 3.16.0 release
2024-09-12 20:17:28
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
36.5%
Related for WOLFI:CVE-2024-39338